/etc/gnome-system-tools/network/profiles.xml is world readable

Bug #65765 reported by Runar
256
Affects Status Importance Assigned to Milestone
gnome-system-tools (Ubuntu)
Fix Released
Undecided
Unassigned
Dapper
Invalid
Low
Unassigned

Bug Description

Binary package hint: gnome-system-tools

/etc/gnome-system-tools/network/profiles.xml wep should not be world readable since it may contain WEP keys in clear text.

$ ll /etc/gnome-system-tools/network/profiles.xml
-rw-r--r-- 1 root root 5.8K 2006-10-12 22:49 /etc/gnome-system-tools/network/profiles.xml

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for your bug. What version of Ubuntu do you use? The new version on edgy writes profiles to the user directory and not to /etc

Revision history for this message
Runar (breisladdmeister) wrote : Re: [Bug 65765] Re: /etc/gnome-system-tools/network/profiles.xml is world readable

I was using 6.06. I am no running 6.10. Does this mean that I can
manually remove /etc/gnome-system-tools/network/profiles.xml now?

Regards,
Runar

On Mon, 2006-12-11 at 18:03 +0000, Sebastien Bacher wrote:
> Thank you for your bug. What version of Ubuntu do you use? The new
> version on edgy writes profiles to the user directory and not to /etc
>

Revision history for this message
Sebastien Bacher (seb128) wrote : Re: [Bug 65765] Re: /etc/gnome-system-tools/network/profiles.xml is world readable

On lun, 2006-12-11 at 20:34 +0000, Runar wrote:
> I was using 6.06. I am no running 6.10. Does this mean that I can
> manually remove /etc/gnome-system-tools/network/profiles.xml now?

Should be fine, if you do it maybe keep the file "in case" though

Revision history for this message
Kees Cook (kees) wrote :

Resolving devel task, adding Dapper task.

Changed in gnome-system-tools:
status: Unconfirmed → Rejected
status: Rejected → Fix Released
importance: Undecided → Low
status: Unconfirmed → Confirmed
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

What is the status of this? Has anyone looked at it for an SRU?

Changed in gnome-system-tools:
status: Confirmed → Incomplete
Revision history for this message
rusivi2 (rusivi2-deactivatedaccount) wrote :

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!

Changed in gnome-system-tools (Ubuntu Dapper):
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.